KR20160003796A - User authentication - Google Patents

Abstract

A method, system, server processing system, and computer readable medium for authenticating a user attempting to access a secure environment. In one form, the server processing system receives an authentication request to authenticate a user attempting to access a secure environment, sends an index corresponding to the selection key from the keymap to the user or a user device associated with the user, Receiving data representative of a code based on the selection key and the personal identifier presented by the user and using the code to determine if the user has been authenticated. Advantageously, the server processing system does not store or receive data that directly represents the individual identifier, so that no one, even an employee in a secure environment in which the user is trying to access, can determine the individual identifier.

Description

User authentication {USER AUTHENTICATION}

Cross reference of related application

This application claims priority to Australian Provisional Application No. 2013901504, filed April 30, 2013, incorporated herein by reference.

The present invention relates to a server processing system, method, computer readable medium and system for user authentication.

In general, when a user needs access to a secure environment, such as a secure web page, the user's authentication is required before granting access to the secure environment. There are many ways now.

A very common technique is to ask the user to provide a user identity and password. In most cases, the user identity and password are encrypted and sent to the server processing system for user authentication. There is a problem with this type of authentication technique. For example, malicious software (i.e., keylogging software) running on the terminal may log user input, and the captured user identity and password may be used maliciously for later fraudulent activity .

Biometric authentication techniques have also been used to authenticate users requesting access to a secure environment. However, there are significant drawbacks when the user ' s biological feature (s) compromise because the user ' s biological characteristics can not be altered.

A physical token, such as a smart card, has also been used as a means of authenticating a user requesting access to a secure environment. However, such a device is inconvenient for a user who can not carry the device at all times and only verifies that the device exists at authentication, but does not actually verify that the user who presented the physical token is actually the correct user to request authentication.

In one aspect, a server processing system for authenticating a user attempting to access a secure environment controlled by a remote server processing system, the server processing system comprising: means for receiving an authentication request from the remote server processing system, Authenticate the user attempting to access; Transmit an index corresponding to a selection key from a keymap stored in a memory or server accessible memory of the user device to the user or a user device associated with the user; Receiving data representative of the code, the user determining the code based on the selection key and the personal identifier presented by the user device; Determine a hash value of the individual identifier using the code and a selection key stored in the server accessible memory; Compare the determined hash value with a stored hash value associated with a user account stored in the server accessible memory; And send an authentication response to the remote server processing system indicating whether the user has been authenticated to access the secure environment based on the comparison.

In some embodiments, the user attempts to access the secure environment from either the user processing system independent of the user device, or from one of the user devices.

In some embodiments, the user device is a portable processing system.

The server processing system receiving a registration request indicating identity data attempting to prove the identity of the user and a unique device profile identifying the user device; Identify the identity of the user based on the identity data; Wherein the user device is configured to create the user account based on positive identification of the identity of the user, wherein the user device is associated with the user account based on the unique device profile.

In some embodiments, upon user enrollment, the server processing system may associate the keymap comprising a plurality of index keys with the user account; And to transmit data indicative of the keymap to the user device for storage in a memory of the user device.

In some embodiments, the server processing system comprises: receiving a personal identifier registration request from the user; Transmitting an index indicating a selection key from the keymap to the user device or the user; Receiving a registration code, the user determining the registration code based on a selection key presented by the user device and a desired personal identifier; Determine a hash value of the desired individual identifier based on the registration code and the selection key; And store the hash value in the user account.

In some embodiments, the server processing system comprises: receiving a personal identifier registration request from the user; Transmit a first index indicating a first selection key from the keymap to the user device or user; Receiving a registration code, the user determining the registration code based on the first selection key and the desired personal identifier presented by the user device; Determine a first hash value of the desired individual identifier based on the registration code and the first selection key; Transmit a second index indicating a second selection key from the keymap to the user device or user; Receiving a second registration code, the user determining the second registration code based on the second selection key and the desired individual identifier; Determine a second hash value using the second registration code and the second selection key corresponding to a second index from the keymap; And store the first or second hash value in the user account in response to the first hash value corresponding to the second hash value.

In some embodiments, the server processing system further comprises: receiving a reset personal identifier request from the user; Enable identification of the identity of the user; In response to a successful acknowledgment, transmit an index of a selection key from the keymap to the user device or user; Receiving a reset code, the user determining the reset code based on the selection key and the new personal identifier presented by the user device; Determine a hash value of the new individual identifier based on the reset code and the selection key; And store the hash value of the new individual identifier in the user account.

In some embodiments, the server processing system is configured to store in the user account data indicative of the identity of the user indicated by the digital certificate of the user.

In some embodiments, the server processing system is configured to receive an index request from the user device, and in response to receiving the index request, the server processing system sends an index of a selection key from the keymap to the user device send.

[0040] In a second aspect, a method for authenticating a user attempting to access a secure environment controlled by a remote server processing system, the method comprising: receiving, by the server processing system, Authenticating a user attempting to access a secure environment; Transmitting an index corresponding to a selection key from a keymap stored in a memory or server accessible memory of the user device to the user or a user device associated with the user; Receiving data representative of the code, the user determining the code based on the selection key and the personal identifier presented by the user device; Determining a hash value of the individual identifier using the code and a selection key stored in the server accessible memory; Comparing the determined hash value to a stored hash value associated with a user account stored in the server accessible memory; And sending an authentication response to the remote server processing system indicating whether the user is authenticated to access the secure environment based on the comparison.

In certain embodiments, the user attempts to access the secure environment from one of the user processing systems, or the user device, that is independent of the user device.

In some embodiments, the user device is a portable processing system.

In certain embodiments, the method further comprises: receiving, by the server processing system, a registration request indicating identity data attempting to prove the identity of the user, and a unique device profile identifying the user device; Confirming the identity of the user based on the identity data; And generating the user account based on positive identification of the identity of the user, wherein the user device is associated with the user account based on the unique device profile.

In some embodiments, the method further comprises: upon user registration, associating the keymap with a user account, the server processing system including a plurality of index keys; And transmitting data representing the keymap to the user device for storage in a memory of the user device.

In some embodiments, the method further comprises: the server processing system receiving a personal identifier registration request from the user; Transmitting an index indicating a selection key from the keymap to the user device or the user; Receiving a registration code, the user determining the registration code based on a selection key presented by the user device and a desired personal identifier; Determining a hash value of the desired individual identifier based on the registration code and the selection key; And storing the hash value in the user account.

In some embodiments, the method further comprises: the server processing system receiving a personal identifier registration request from the user; Transmitting a first index indicating a first selection key from the keymap to the user device or the user; Receiving a first registration code, the user determining the first registration code based on the first selection key and the desired personal identifier presented by the user device; Determining a first hash value of the desired individual identifier based on the first registration code and the first selection key; Transmitting a second index indicating a second selection key from the keymap to the user or user device; Receiving a second registration code, the user determining the second registration code based on the second selection key and the desired personal identifier presented by the user device; Determining a second hash value using the second registration code and the second selection key corresponding to a second index from the keymap; And storing the first or second hash value in the user account in response to a first hash value corresponding to the second hash value.

In some embodiments, the method further comprises: the server processing system receiving a reset personal identifier request from the user; Enabling identification of the identity of the user; Transmitting an index of a selection key from the keymap to the user device or user in response to a successful confirmation; Receiving a reset code, the user determining the reset code based on the selection key and a new personal identifier; Determining a hash value of the new individual identifier based on the reset code and the selection key; And storing the hash value of the new individual identifier in the user account.

In certain embodiments, the method includes storing, in the user account, data representing a user's identity as indicated by the digital certificate of the user of the server processing system.

In some embodiments, the method further comprises the server processing system receiving an index request from the user device, and in response to receiving the index request, the server processing system determines the index of the selection key from the keymap To the user device.

In a third aspect, there is provided a computer-readable medium for configuring a server processing system to authenticate a user attempting to access a secure environment controlled by a remote server processing system, the computer readable medium comprising: There is provided a computer readable medium comprising executable instructions for configuring the server processing system to perform the method of claim 1.

[0030] In a fourth aspect the invention provides a system for authenticating a user attempting to access a secure environment controlled by a remote server processing system, the system comprising a server processing system and a software application, Authenticate a user who receives an authentication request from the processing system and attempts to access the secure environment; Transmit an index corresponding to a selection key from a keymap stored in a memory or server accessible memory of the user device to the user or a user device associated with the user; Receiving data representative of the code, the user determining the code based on the selection key and the personal identifier presented by the user device; Determine a hash value of the individual identifier using the code and a selection key stored in the server accessible memory; Compare the determined hash value with a stored hash value associated with a user account stored in the server accessible memory; And send an authentication response to the remote server processing system indicating whether the user is authenticated to access the secure environment based on the comparison, the software application being executable by the user device to receive the keymap , Storing the keymap in a memory of the user device, and configuring the user device to present the selection key from the keymap to the user based on the index.

The server processing system according to the fifth aspect is configured to cause a user to reset a personal identifier used to authenticate a user attempting to access a secure environment controlled by a remote server processing system, Receive a personal identifier request; Enable identification of the identity of the user; Responsive to successful identification, transmitting an index corresponding to a selection key from a keymap associated with the user account to the user device or user, the keymap being stored in a memory of the user device and in a server accessible memory; Receiving a reset code, the user determining the reset code based on the selection keymap and a new personal identifier; Determine a hash value of the new individual identifier based on the reset code and the selection key; And store the hash value of the new individual identifier in the user account.

[0030] In a sixth aspect, a method is provided for resetting a personal identifier to authenticate a user attempting to access a secure environment controlled by a remote server processing system, the method comprising: receiving, by the server processing system, Receiving a request; Enabling identification of the identity of the user; Responsive to successful identification, transmitting an index corresponding to a selection key from a keymap associated with the user account to the user device or user, wherein the keymap is stored in memory and server accessible memory of the user device; Receiving a reset code, the user determining the reset code based on the selection keymap and a new personal identifier; Determining a hash value of the new individual identifier based on the reset code and the selection key; And storing the hash value of the new individual identifier in the user account.

[0065] In a seventh aspect there is provided a computer-readable medium constituting a server processing system for causing a user to reset a user identifier used to authenticate a user attempting to access a secure environment controlled by a remote server processing system, The computer readable medium of claim 1, wherein the computer readable medium comprises executable instructions that, when executed, configure the server processing system to perform the method of the sixth aspect.

Other forms and embodiments will be realized through the detailed description.

BRIEF DESCRIPTION OF THE DRAWINGS Exemplary embodiments will become apparent from the following description, taken in conjunction with the accompanying drawings, as examples of at least one preferred non-limiting embodiment.
BRIEF DESCRIPTION OF THE DRAWINGS Figure 1 is a functional block diagram of an exemplary processing system that may be used to implement or provide an effect on a particular embodiment.
Figure 2 illustrates an exemplary network infrastructure that may be used to implement or provide an effect on a particular embodiment;
3 is a system diagram of a system for authenticating a user attempting to access a secure environment.
4 is a flow diagram illustrating an exemplary method performed by a server processing system to authenticate a user attempting access to a secure environment;
5 is a flow chart illustrating an exemplary method by which a user registers to use an authentication service provided by a server processing system.
6A illustrates an exemplary keymap;
Figure 6B illustrates an exemplary user interface including a graphical representation of key and identifier references;
7 is a flow chart illustrating an exemplary method for a user to reset a personal identifier for use in authenticating a user.

To better understand the subject matter of the preferred embodiments or examples, the following modes are given as examples only. In the figures included to illustrate the features of the exemplary embodiments, like reference numerals are used to identify like parts throughout the drawings.

An exemplary processing system

A particular embodiment may be realized using a processing system, an example of which is shown in Fig. In particular, the processing system 100 generally includes at least one processor 102 or processing unit or plurality of processors, a memory 104, at least one input device 106, And at least one output device (108). In some embodiments, input device 106 and output device 108 may be the same device. The interface 112 may also be provided for coupling the processing system 100 to one or more peripheral devices, for example, the interface 112 may be a PCI card or a PC card. At least one storage device 114 for housing at least one database 116 may also be provided. The memory 104 may be any type of memory device, for example, a volatile or non-volatile memory, a solid state storage device, a magnetic device, and the like. The processor 102 may, for example, include more than one discrete processing device to handle different functions within the processing system 100. For example,

The input device 106 may receive input data 118 and may include a pointer device such as, for example, a keyboard, a pen-shaped device or a mouse, an audio receiving device for activating a voice control of a microphone or the like, a data receiver such as a modem or a wireless data adapter Or an antenna, a data acquisition card, or the like. The input data 118 may for example originate from a different source, for example a keyboard command, in combination with the data received via the network. Output device 108 may generate or generate output data 120 and may include, for example, a display device or monitor when output data 120 is visually visible, a printer, port, A data transmitter or antenna, such as a USB port, a peripheral component adapter, a modem or a wireless network adapter, and the like. The output data 120 may be separate and derived from different display devices, for example, a visual display on the monitor in combination with data transmitted to the network. The user can view the data output or the interpretation of the data output, for example on a monitor or using a printer. The storage device 114 may be any type of data or information storage means, e.g., volatile or nonvolatile memory, solid state storage, magnetic devices, and the like.

In use, the processing system 100 is adapted to store and / or retrieve data or information from at least one database 116 and / or memory 104 via wired or wireless communication means. The interface 112 may allow for wired and / or wireless communication between the processing unit 102 and a peripheral component that may provide a special purpose. The processor 102 may receive the command as input data 118 via the input device 106 and display the processed or other output to the user using the output device 108. [ More than one input device 106 and / or output device 108 may be provided. It should be appreciated that the processing system 100 may be any type of terminal, server, special hardware, or the like.

The processing device 100 may be part of the networking communication system 200 as shown in FIG. The processing device 100 may be connected to a network 202, e.g., the Internet or a WAN. The input data 118 and the output data 120 may be communicated to another device over the network 202. Other terminals, such as a thin client 204, additional processing systems 206 and 209, a notebook computer 210, a mainframe computer 212, a PDA 214, a pen-based computer 216 , A server 218, and the like may be connected to the network 202. Many other various types of terminals or configurations may be used. The transmission of information and / or data over the network 202 may be accomplished using wired communication means 220 or wireless communication means 222. The server 218 may enable data transfer between the network 202 and one or more databases 224. Server 218 and one or more databases 224 provide examples of information sources.

Another network may communicate with the network 202. For example, the telecommunications network 230 may communicate data between the network 202 and the mobile or cellular telephone 232 or PDA type device 234 by using the wireless communication means 236 and the receiving / . ≪ / RTI > The satellite communications network 240 may communicate with a satellite signal receiver 242 that receives data signals from the satellites 244 and, as a result, remotely communicates with the satellite signal transmitters 246. A terminal, for example, an additional processing system 248, a notebook computer 250, or a satellite telephone 252 may communicate with the network 202. For example, a local network 260, which may be a dedicated network, a LAN, etc., may also be connected to the network 202. For example, the network 202 may be connected to a server 266 that controls the transfer of data to and / or from the terminal 264, the database 268, and the Ethernet 262 that connects the printer 270 . Various other types of networks may be used.

The processing device 100 may be adapted to communicate with other terminals, e. G., Additional processing systems 206 and 208, by transmitting and receiving data 118 and 120 to and from the network 202, Lt; RTI ID = 0.0 > of the < / RTI >

Thus, for example, the network 202, 230, 240 may form part of the Internet or be connected to the Internet, in which case the terminals 206, 212, 218 may be, for example, have. The network 202, 230, 240, 260 may be any other communication network such as a LAN, WAN, Ethernet, Token Ring, FDDI ring, star network or a mobile telephone network such as a GSM, CDMA or 3G network, And may be wired, in whole or in part, including, for example, an optical fiber or a wireless network, depending on the particular implementation.

System overview

Referring to FIG. 3, a system diagram illustrating an exemplary system 300 for authenticating a user 350 attempting to access a secure environment 325 is shown.

In particular, the system 300 includes a server processing system 310 that communicates data with a remote server processing system 320 via data communication means. The server processing system 310 is associated with a server accessible memory 315 provided in the form of a database and the server accessible memory stores account data for authenticating the user 350. The remote processing system 320 controls access to a secure environment 325 that is restricted to authorized users. Examples of secure environment 325 include potentially physical environments such as a secure web site, a secure environment such as a secure server service, or a secure door within a building.

The system 300 may also include a user processing system 340 in data communication with a remote server processing system 320 via data communication means. The user 350 interacts with the user processing system 340 to access the remote server processing system 320 to access the secure environment 325. [ Examples of the user processing system 340 may include a desktop terminal, a laptop, a tablet computer, and the like.

The system 300 also includes a user device 330 that is independent of the user processing system 340 and that is in communication with the user 350 and in data communication with the server processing system 310 via data communication means. User device 330 is preferably separate from and separate from the mobile phone (i.e., "smart phone, etc.), wearable processing system (i.e., Google Glass ^TM ) or user processing system 340, The user device 330 is a portable processing system associated with a user 350 such as any other interacting device. The user device 330 is a software application 335 (generally referred to as an " app ") that presents an interface to a user for authentication ) In the memory.

In one form, no user processing system is needed. In particular, a user may interact with a user device to access a secure environment 325 and send a request to a remote server processing system 320.

Enrollment

4, an exemplary method by which a user 350 registers with a server processing system 310 that authenticates a user 350 when accessing a secure environment 325 controlled by a remote server processing system 320 (400). ≪ / RTI >

In particular, at step 405, method 400 includes user 350 sending a registration request to server processing system 310. The registration request may be sent from the user device 330 operating by the user 350 and / or from the user processing system 340. In particular, if a registration request is submitted at least partially using the user device 330, then this means that the user installs the software application 335 on the user device 330 and launches the software application 335 The user may interact with the software application 335 to submit a registration request. The registration request may represent identity data that attempts to prove the identity of the user 350 and the unique device identifier may represent the user device 330. [ The identity data may represent a credit card number, a passport number, utility bills, an address, and other similar information. In a particular embodiment, the unique device identifier is a unique device profile generated by the software application 335. [ The software application 335 determines a number of features of the user device 330 and generates a unique device profile using the determined features. The determined feature may include the hardware of the user device 330 (CPU, memory, etc.), the MAC address of the user device 330, a software profile that may represent the digital certificate associated with the user, and one of the one or more identifiers associated with the user device 330 And may include the above features. The software application 335 applies a hashing algorithm to the determined feature to generate a unique device profile in the form of a hash value. The unique device profile is then transmitted to the server processing system for storage. The unique device profile operates as a device signature to uniquely identify the user device 330 based on a number of characteristics of the user device 330. In a particular embodiment, the native device profile is also stored in the memory of the user device 330 and can be used to implement a security check as described in detail below.

At step 410, the method 400 includes the server processing system 310 enabling validation of the identity of the user 350 based on the identity data. In particular, the server processing system 310 may use an identity verifier (IDV) in an attempt to verify that a set of information is associated with a single user. In response to a positive acknowledgment, the method proceeds to step 415. Otherwise, the server processing system 310 may request the user 350 for additional identification information.

At step 415, the method 400 includes the server processing system 310 creating a user account in the memory 315 associated with the server processing system 310. The memory 315 is preferably a database accessible by the server processing system 310. The server processing system 310 associates the user device 330 with a user account based on a unique device identifier, which in a particular embodiment is a unique device profile.

At step 420, the method 400 includes the server processing system 310 storing the association between the keymap 600 and the user account. In particular, each keymap 600 includes a plurality of unique keys 620 associated with a unique index number 610 (i.e., a serial number). An example of a graphical representation of a keymap 650 that includes a plurality of keys 620 and an associated index 660 is shown in FIG. 6A. In particular, each key 620 includes a plurality of unique key portions 630. In this example, each key 620 includes an alphabetic key portion, but other types of keys may be used.

At step 425, the method 400 includes server-processing system 310 sending keymap data representing a plurality of index keys of the keymap 600 associated with the user account to the user device 300.

At step 430, method 400 includes user device 330 storing keymap data in local memory.

At step 435, the method 400 includes the server processing system 310 receiving a request for registration of a personal identifier from the user 350. The personal identifier registration request may be received from the user processing system 340 or the user device 330. In response, the server processing system sends to the user processing system 340 or user device 330 to present to the user a code request interface requesting the user to enter a code that indirectly indicates the desired individual identifier. The code request interface may be presented via a web browser, a web-enabled application, or the like. The code request interface may be part of a web page or web page presented to the user 350. [ For example, the code request interface may be a frame or window located within a web page hosted by the remote server processing system 320, and the code request interface may be generated and hosted by the server processing system 325. As will be described in greater detail below, the code that is entered by the user 350 into the code request interface is sent to the server processing system 310.

At step 437, the method 400 includes the step of the user requesting an index to the server processing system via the software application 335 of the user device 330. Here, the request is called an index request. The index request is sent from the user device 330 to the server processing system, and the index request may indicate the user device profile and / or identity of the user. The index request may be digitally signed using a private key associated with the user ' s digital certificate, as described in detail below.

At step 440, in response to receiving the index request, the method 400 causes the server processing system 310 to send an index 610, which represents the select key 620 from the keymap 600 associated with the user account, (330). The user device profile and / or user identity is used by the server processing system 310 to determine the user account and the appropriate keymap. In situations where a code requesting interface is presented through the user processing system 340 and the user device 330 is not communicating with the server processing system 310 the server processing system 310 may send an index 610) to the user. The user may then manually enter the index 610 into the software application 335 using the input device of the user device 330. [ A user may be required to interact with the user processing system 340 to request the transmission and presentation of the index 610 to the user processing system 340. [

At step 445, the method includes the user device 330 retrieving the corresponding key 620 from the keymap 600 stored in local memory based on the index 610 received.

The method includes the step of the user device 330 creating and displaying a user interface 640 on the user device 330 wherein the user interface 640 of the software application 335 is a key (620) and an identifier reference (650). Referring to FIG. 6B, an exemplary user interface 640 is shown for presenting identifier references 650 in ascending order as a numerical display comprising ten keys for a number from zero to nine. As shown in FIG. 6B, the key 620 may include a corresponding number of random alphabet characters. 6, the user interface 640 presents each key portion 630 adjacent to the corresponding identifier reference portion 660 so that each digit of the identifier reference 650 is associated with the key 620, Aligned with and adjacent to the corresponding key portion 630 of FIG. It will be appreciated that other configurations of alphanumeric characters in the key 620 and identifier reference 650 may be used.

At step 455, the method 400 includes the step of the user 350 determining the code using the presented key and the desired individual identifier. In one form, the user examines the visually presented interface 640 and determines the code. For example, for each number of the desired individual identifier, the user 350 identifies the key portion 630 corresponding to this number 660 in the identifier reference 650. The key portion 630 is connected together by a user to form a cord. Based on the interface shown in Fig. 6B, if the desired personal identifier of the user is "1032 ", the code for user 350 is" QRSL ". When the user 350 uses the user device 330 to set a personal identifier, the user may interact with the input device of the user device 330 to input the code into the code request interface, Indicates a private identifier indirectly. Alternatively, if the user obtains access to a secure environment using the user processing system 340, the user may use the input device of the user processing system 340 to retrieve the code from the code request interface < RTI ID = 0.0 > As shown in FIG.

At step 460, the method 400 includes sending a response to the server processing system 310 indicating that the user device 330 or the user processing system 340 has entered the code into the code request interface by the user 350 . The code request interface presented by the user device 330 or the user processing system 340 may include a submit button where the code is used by the user device 330 or the user processing system 340 to perform a user selection of the submit button Lt; RTI ID = 0.0 > 310 < / RTI >

At step 465, the method 400 includes the server processing system 310 determining a hash value based on the code and the selection key 620. [ In particular, the server processing system 310 may include an input parameter of the received code, a selection key 620 from the keymap 600 corresponding to the index 610 sent in step 440, salt) value to the hashing algorithm executed by the server processing system 310 to generate a hash value. Preferably, the hashing algorithm is a unidirectional hashing algorithm such as SHA-3, MD5 or a variant thereof. The hashing algorithm may use commutative cipher techniques so that the individual identifier need not be identified by the server processing system 310. [

At step 470, the method 400 includes the server processing system 310 storing the hash value in the user account in the database. Advantageously, the server processing system 310 does not store the user's personal identifier or the server processing system 310 does not receive data that directly represents the personal identifier, thereby providing a substantial security benefit. In some embodiments, these security gains may allow a user 350 to know his or her personal identifier, but even anyone in the secure environment 325 where the user 350 attempts to access can determine the personal identifier It contains no results.

It will be appreciated that server processing system 310 may repeat steps 440 through 465 to obtain two hash values. In particular, the server processing system 310 may be configured to provide a different index 610 to the user device 330 (or a user via the user processing system if the user device 330 is not communicating with the server processing system 310) Lt; / RTI > The server processing system 310 then computes a second hash value based on the additional code received from the user and if the hash value is congruent (i.e., matched), the hash value (i.e., The first or second hash value) is stored in the database. If the hash value is not matched, this indicates that the user 350 mis-marked the desired non-congruent personal identifier. Thereby, the registration process may be terminated or the user 350 may be requested to repeat the registration process again.

certification

5, a flow chart illustrating an exemplary method of authenticating a user 350 that the server processing system 310 attempts to access a secure environment 325 hosted by a remote server processing system 320, do.

In particular, at step 505, the method 500 determines whether the user 350 requests the remote server processing system 320 to access the secure environment 325 by operating the user processing system 340 or the user device 330 To the base station. The request may be submitted via a web browser, a web-enabled application, or the like.

At step 510, the method 500 includes the remote server processing system 320 sending an authentication request to the server processing system 310 to authenticate the user 350. The authentication request indicates that the user requests access to a stable environment. In a preferred form, the remote server processing system 320 can digitally sign the request using a digital certificate that identifies the identity of the remote server processing system 320 to the server processing system 310. The server processing system 310 may then enable identification of the identity of the remote server processing system 320 based on the digitally signed request to ensure that the request has been received by the identifiable entity. The server processing system 310 records in the database 315 that an authentication request has been received for the user 350 and associates a timestamp with this request.

In response to requesting access to the secure environment 325 by the remote server processing system 320, the remote server processing system 320 requests an interface that includes a code request interface hosted by the server processing system 310 To the device 330 or 340. The code request interface can be presented via a web browser, a web-enabled application.

The method 500 interacts with the software application 335 of the user device 330 to send an index request to the server processing system 310 so that the server processing system can determine whether the user 350 To select the index 610 of the key 620 from the user ' s keymap 600. In a preferred form, server processing system 310 is required to receive an index request from user 350 within a temporal threshold period, otherwise server processing system 310 may allow user 350 to enter secure environment 325 It will send an authentication response to the remote server processing system 320 indicating that it is not authorized to access. In order to send the request, the user 350 may launch the software application 335 on the user device 330 to initiate the transmission of the index request. At this time, the user device 330 also digitally signs the index request using the private key of the user's digital certificate, allowing the server processing system 310 to verify the user's identity using the public key. If the digital signature has not successfully verified the identity of the user 350, the server processing system 310 may send an authentication response to the remote server processing system (e. G., The server 350) to indicate that the user 350 is not authorized to access the secure environment 325 320).

At step 520, the method 500 determines that the remote server processing system 320 has received data indicating the index 610 of the selection key 620 from the keymap 600 associated with the user account, To the software application of the computer 330. The server processing system 310 records the challenge issued to indicate the selected index 610 in the user account. As described above, when user device 330 is not in data communication with server processing system 310, server processing system 310 may include data representing the index of the selected index 610 for presentation to user 350 To the user processing system 340. The user 350 then manually enters the suggested index via the input device of the user device 330 into the software application 335 to allow the user device 330 to successfully receive the index. The user 350 may be required to interact with the user processing system 340 to request the transmission of the index 610 to the user processing system 340. [

Optionally, at step 522, the method includes the user device 330 performing a security check. In particular, the software application 335 determines one or more user device characteristics to create a user device profile as described hereinabove. The software application 335 then compares the newly created user device profile with the user device profile stored in the memory of the user device 330. [ In the case of a successful comparison, the method proceeds to step 525, else the method ends. This process can check if tampering has occurred to the user device 330. [

At step 525, the method 500 includes the step of the software application 335 of the user device 330 retrieving from the local memory the key 620 corresponding to the index 610 from the keymap 600.

The method 500 includes generating and displaying a user interface 600 on the user device 330 and the software application 335 of the user device 330 includes a user interface 600, Provides a graphical representation of the key 620 and the identifier reference 650. This process is performed similarly to step 450 described above.

At step 535 the method 500 determines the code using the user interface 640 of the software application 335 presented by the user device 330 to the user 350. [ Step is performed similar to step 455 described above except that the user inputs a key portion corresponding to a portion of the personal identifier set rather than the desired personal identifier via the code request interface.

At step 540, the method 500 includes sending data representing the code entered by the user 350 through the code request interface to the user processing system 340 or user device 330 to the server processing system .

The server processing system 310 may be configured to determine whether a challenge response is received within the temporal threshold period of the received initial authentication request and / or issued challenge request. If the response is not received within a temporal threshold period, the server processing system 310 may send an authentication response to the remote server processing system 320 indicating that the user is not authenticated to access the secure environment 325.

At step 545, the method 500 includes the server processing system 310 determining a hash value based on the code and the selection key 620. [ In particular, the server processing system 310 may include an input variable of the received code, a selection key 620 corresponding to the index 610 received by the user device 330, and a salt value associated with the user 350 To a hashing algorithm executed by the server processing system 310 to generate a hash value. Preferably, the hashing algorithm is a unidirectional hashing algorithm such as SHA-3, MD5 or a variant thereof. The hashing algorithm may use a recursive cryptographic technique so that the individual identifier need not be identified by the server processing system 310. [

At step 550, the method 500 includes the server processing system 310 comparing the determined hash value to the stored hash value in the user account. Advantageously, the server processing system 310 does not obtain or receive the user ' s personal identifier, and can provide a significant security benefit. In some embodiments, these security gains are determined by the user 350, even though the user 350 knows his or her personal identifier, but even the employee in the secure environment 325 where the user 350 attempts to access, Contains no results.

At step 555, the method 500 comprises server processing system 310 generating an authentication response and sending it to remote server processing system 320, wherein the authentication response is based on a comparison of step 550 And indicates whether the user 350 is authenticated to access the secure environment 325. In particular, if the hash value does not correspond to the comparison being performed in step 550, the server processing system 310 may determine that the user 350 has access to the secure environment 325 controlled by the remote server processing system 320 Is not approved, and transmits the authentication response. If, however, the hash value corresponds to the comparison made in step 560, the server processing system 310 may allow the user 350 to grant access to the secure environment 325 controlled by the remote server processing system 320 And generates and transmits a response indicating that it should be received.

At step 560, the method 500 includes the step of the server processing system 310 recording in the user account that a challenge response has been received and an authentication response has been sent to the remote server processing system 320.

If the user 350 incorrectly enters the code through the user processing system 340, the server processing system 310 can re-generate one or more additional challenge requests, and unique and different indexes 610 can be generated for each challenge request ≪ / RTI > If the incorrect code of the critical number is identified by the server processing system 310 for single authentication credentials by the remote server processing system 320 the server processing system 310 may allow the user 350 to enter the secure environment 325 And send an authentication response to the remote server processing system 320 indicating that the access should not be granted.

Individual identifier reset

Referring to FIG. 7, a flowchart is shown illustrating how user 350 sends a reset request to server processing system 310.

Specifically, at step 705, the method includes the user 350 sending a reset request to the server processing system 310 to reset the user's personal identifier. The reset request may be sent from the user processing system 340 or the user device 330 potentially through the software application 335. [ The reset request may identify the identity of the user, including data or IDV that may be used by the server processing system.

At step 710, the server processing system 310 enables identification of the user's identity. In response to a successful identification of the user's identity, a code request interface hosted by the server processing system is presented to the user 350 via the user device 330 or the user processing system 340 and the method 700 proceeds to step 712 Otherwise, the reset process is terminated.

At step 712 the user 350 interacts with the software application 335 of the user device 335 to transmit the index request to the server processing system 340.

At step 715 the method 700 includes the server processing system 310 sending an index 610 of the selection key 620 from the keymap 600 associated with the user account to the user device 330 do. As described above, if the user device 330 is not in data communication with the server processing system 310, the server processing system 310 may determine the index 610 of the selection key 620 to present to the user 350, To the user processing system 340. < RTI ID = 0.0 > The user 350 then manually enters the index 610 presented to the software application 335 via the input device of the user device 330 to allow the user device 330 to successfully receive the index 610. [ The user may be required to interact with the user processing system 340 to request the transmission of the index to the user processing system 340.

The server processing system 310 may store in the database 315 a received reset request and a record of the index 610 sent to the user and store a time stamp indicating the time each of these events occurred in the database 315 do.

At step 720, the method 700 begins by determining whether the software application 335 of the user device 330 has received the index 610 from the keymap 600 stored in the memory of the user device 330 and the corresponding key 620 ) From the local memory.

The method 700 includes generating a user interface 600 and displaying the user interface 600 on the user device 330. The user interface 600 includes a key 620 and an identifier < RTI ID = 0.0 > A graphical representation of reference 650 is presented. This step is performed similarly to step 450 described above.

At step 730, the method 700 includes the step of the user 350 determining the reset code using the user interface presented by the user device. For example, for each number of new individual identifiers, the user 350 identifies each key portion 630 corresponding to each number in the identifier reference 650 and concatenates that key portion 630 Thereby forming a reset code. Based on the interface shown in FIG. 6B, if the user's new personal identifier is "5732 ", then the reset code entered by user 350 is" XKSL ".

At step 735, the method 700 includes the steps of the user processing system 340 or the user device sending a response through the code request interface to the server processing system 310 indicating a reset code entered by the user 350 .

The server processing system 310 may be configured to determine whether a reset code has been received within a time critical period of a reset request or transmission of an index. If the reset code is not received within a temporal threshold period, the server processing system 310 may refuse to reset the individual identifier based on the received reset code.

At step 740, the method 700 includes the server processing system 310 determining the hash value based on the reset code and the selection key. In particular, the server processing system 310 receives the input variable of the received reset code, the key from the keymap corresponding to the index sent to the user, and the salt value associated with the user 350 to the hashing algorithm To generate a hash value. Preferably, the hashing algorithm is a unidirectional hashing algorithm such as SHA-3, MD5 or a variant thereof.

At step 745, the method 700 includes the server processing system 310 storing the determined hash value of the user's new personal identifier into the user account and deleting the previous hash value corresponding to the user's previous personal identifier do. Advantageously, the server processing system 310 does not store the user's new personal identifier or the server processing system 310 does not receive data that directly represents the new personal identifier, providing significant security benefits. In some embodiments, these security gains are such that the user 350 knows his or her personal identifier, but no one else can even determine the individual identifier, even in the secure environment 325 where the user 350 attempts to access Results.

It should be appreciated that steps 710-740 may be repeated to confirm that the user 350 has indirectly identified the same new individual identifier. If two hash values correspond, the hash value corresponding to the new individual identifier is stored in the user account.

Although some of the above processes have been described in connection with the user interacting with the user processing system 340, it will be appreciated that the user can perform the same steps using the user device 330. [

transform

It will be appreciated that the embodiment shown in FIG. 3 represents only a single user 350 and a single remote server processing system 320. The server processing system 310 preferably will be in data communication with a plurality of remote server processing systems 320 and each remote server processing system 320 will control user access to each secure environment 325 .

The server processing system 310 preferably communicates data with a plurality of user devices 330 each associated with a plurality of users 350 and a memory associated with the server processing system 310 to authenticate the plurality of users 350. [ Lt; RTI ID = 0.0 > 325 < / RTI >

It will be appreciated that server processing system 310 may be provided in the form of a distributed processing system or a single dedicated processing system.

It will be appreciated that the data transmitted between the various components of the system may utilize encryption and digital signature techniques.

It will be appreciated that other hashing processes may be applied by the server processing system 310. [ In particular, alternatively, the server processing system 310 may determine the user's personal identifier by applying the selection key associated with the index transmitted in the request to the user device 330 in reverse. Upon determination, the server processing system 310 may immediately hash the user's personal identifier. The user's personal identifier is then immediately purged from the RAM of the server processing system 310 so that no data is directly stored by the server processing system 310 indicating the user's personal identifier.

The IDV may be part of a separate processing system that is in data communication with the server processing system 310 or the server processing system 310.

Although the key and the personal identifier are illustrated above as a series of alphabetic characters and / or numbers, other types of data may be used, such as a unique graphic icon, color, audible tone, and the like.

Although the security checking process performed at step 522 has been described with respect to the authentication process, a security checking process may also be performed in the methods 400 and 700 to ensure that malicious tampering does not occur at the user device have.

The embodiments may take the form of a complete hardware embodiment, a complete software embodiment, an embodiment combining firmware or software and hardware forms.

It will be apparent to those skilled in the art that many modifications are possible without departing from the scope of the invention.

Claims (25)

A server processing system for authenticating a user attempting to access a secure environment controlled by a remote server processing system, the server processing system comprising:
Authenticate a user attempting to access the secure environment by receiving an authentication request from the remote server processing system;
Transmit an index corresponding to a selection key from a keymap stored in a memory or server accessible memory of the user device to the user or a user device associated with the user;
Receiving data representative of the code, the user determining the code based on the selection key and the personal identifier presented by the user device;
Determine a hash value of the individual identifier using the code and a selection key stored in the server accessible memory;
Compare the determined hash value with a stored hash value associated with a user account stored in the server accessible memory;
And to send an authentication response to the remote server processing system indicating whether the user is authorized to access the secure environment based on the comparison
A server processing system configured. The method of claim 1,
A user processing system independent of the user device, or
The user device
To access the secure environment from one of the plurality of servers. 3. The server processing system of claim 1 or 2, wherein the user device is a portable processing system. 4. The server processing system according to any one of claims 1 to 3,
Identity data that attempts to prove the identity of the user, and
The unique device profile identifying the user device
Receiving a registration request indicating < RTI ID = 0.0 >
Identify the identity of the user based on the identity data;
To create the user account based on positive identification of the user ' s identity
Respectively,
Wherein the user device is associated with the user account based on the unique device profile. 5. The method of claim 4, wherein upon user registration, the server processing system comprises:
Associating the keymap with a plurality of index keys with the user account;
To transmit data indicative of the keymap to the user device for storage in a memory of the user device
A server processing system configured. 6. The system of claim 5, wherein the server processing system comprises:
Receiving a personal identifier registration request from the user;
Transmitting an index indicating a selection key from the keymap to the user device or the user;
Receiving a registration code, the user determining the registration code based on a selection key presented by the user device and a desired personal identifier;
Determine a hash value of the desired individual identifier based on the registration code and the selection key;
To store the hash value in the user account
A server processing system configured. 6. The system of claim 5, wherein the server processing system comprises:
Receiving a personal identifier registration request from the user;
Transmit a first index indicating a first selection key from the keymap to the user device or user;
Receiving a registration code, the user determining the registration code based on the first selection key and the desired personal identifier presented by the user device;
Determine a first hash value of the desired individual identifier based on the registration code and the first selection key;
Transmit a second index indicating a second selection key from the keymap to the user device or user;
Receiving a second registration code, the user determining the second registration code based on the second selection key and the desired individual identifier;
Determine a second hash value using the second registration code and the second selection key corresponding to a second index from the keymap;
And to store the first or second hash value in the user account in response to the first hash value corresponding to the second hash value
A server processing system configured. 8. The system according to claim 6 or 7, wherein the server processing system comprises:
Receive a reset individual identifier request from the user;
Enable identification of the identity of the user;
In response to a successful acknowledgment, transmit an index of a selection key from the keymap to the user device or user;
Receiving a reset code, the user determining the reset code based on the selection key and the new personal identifier presented by the user device;
Determine a hash value of the new individual identifier based on the reset code and the selection key;
To store the hash value of the new individual identifier in the user account
A server processing system configured. 9. The server processing system according to any one of claims 4 to 8, wherein the server processing system is configured to store in the user account data indicative of the identity of the user indicated by the digital certificate of the user. 10. The server processing system according to any one of claims 1 to 9, wherein the server processing system is configured to receive an index request from the user device, and in response to receiving the index request, And transmits an index of the key to the user device. A method for authenticating a user attempting to access a secure environment controlled by a remote server processing system, the method comprising:
Authenticating a user attempting to access the secure environment by receiving an authentication request from the remote server processing system;
Transmitting an index corresponding to a selection key from a keymap stored in a memory or server accessible memory of the user device to the user or a user device associated with the user;
Receiving data representative of the code, the user determining the code based on the selection key and the personal identifier presented by the user device;
Determining a hash value of the individual identifier using the code and a selection key stored in the server accessible memory;
Comparing the determined hash value to a stored hash value associated with a user account stored in the server accessible memory; And
Sending an authentication response to the remote server processing system indicating whether the user is authorized to access the secure environment based on the comparison
≪ / RTI > 12. The method of claim 11,
A user processing system independent of the user device, or
The user device
To access the secure environment. 13. The method of claim 11 or 12, wherein the user device is a portable processing system. 14. The method according to any one of claims 11 to 13, wherein the server processing system comprises:
Identity data that attempts to prove the identity of the user, and
The unique device profile identifying the user device
Receiving a registration request indicating a registration request;
Confirming the identity of the user based on the identity data; And
Creating a user account based on positive identification of the identity of the user
Lt; / RTI >
Wherein the user device is associated with the user account based on the unique device profile. 15. The method of claim 14, wherein the method further comprises, upon user registration,
Associating the keymap including a plurality of index keys with the user account; And
Transmitting data indicative of the keymap to the user device for storage in a memory of the user device
≪ / RTI > 16. The method of claim 15, wherein the server processing system further comprises:
Receiving a personal identifier registration request from the user;
Transmitting an index indicating a selection key from the keymap to the user device or the user;
Receiving a registration code, the user determining the registration code based on a selection key presented by the user device and a desired personal identifier;
Determining a hash value of the desired individual identifier based on the registration code and the selection key; And
Storing the hash value in the user account
≪ / RTI > 16. The method of claim 15, wherein the server processing system further comprises:
Receiving a personal identifier registration request from the user;
Transmitting a first index indicating a first selection key from the keymap to the user device or the user;
Receiving a first registration code, the user determining the first registration code based on the first selection key and the desired personal identifier presented by the user device;
Determining a first hash value of the desired individual identifier based on the first registration code and the first selection key;
Transmitting a second index indicating a second selection key from the keymap to the user or user device;
Receiving a second registration code, the user determining the second registration code based on the second selection key and the desired personal identifier presented by the user device;
Determining a second hash value using the second registration code and the second selection key corresponding to a second index from the keymap; And
Storing the first or second hash value in the user account in response to a first hash value corresponding to the second hash value
≪ / RTI > 18. The method of claim 16 or 17, wherein the server processing system further comprises:
Receiving a reset individual identifier request from the user;
Enabling identification of the identity of the user;
Transmitting an index of a selection key from the keymap to the user device or user in response to a successful confirmation;
Receiving a reset code, the user determining the reset code based on the selection key and a new personal identifier;
Determining a hash value of the new individual identifier based on the reset code and the selection key; And
Storing the hash value of the new individual identifier in the user account
≪ / RTI > 19. A method as claimed in any one of claims 14 to 18, wherein the method comprises storing in the user account data representing a user's identity as indicated by the digital certificate of the user of the server processing system. 20. The method of claim 19, wherein the server processing system comprises receiving an index request from the user device, and in response to receiving the index request, To the user device. A computer readable medium comprising a server processing system for configuring a server processing system to authenticate a user attempting to access a secure environment controlled by a remote server processing system, the computer readable medium comprising: 19. A computer readable medium comprising executable instructions for configuring the server processing system to perform the method recited in any one of the preceding claims. A system for authenticating a user attempting to access a secure environment controlled by a remote server processing system, the system comprising a server processing system and a software application,
Authenticate a user attempting to access the secure environment by receiving an authentication request from the remote server processing system;
Transmit an index corresponding to a selection key from a keymap stored in a memory or server accessible memory of the user device to the user or a user device associated with the user;
Receiving data representative of the code, the user determining the code based on the selection key and the personal identifier presented by the user device;
Determine a hash value of the individual identifier using the code and a selection key stored in the server accessible memory;
Compare the determined hash value with a stored hash value associated with a user account stored in the server accessible memory;
And to send an authentication response to the remote server processing system indicating whether the user is authorized to access the secure environment based on the comparison
Respectively,
The software application being executable by the user device,
Receiving the keymap,
Storing the keymap in a memory of the user device,
And to present the selection key from the keymap to the user based on the index
And the system comprising the user device. A server processing system for causing a user to reset a personal identifier used to authenticate a user attempting to access a secure environment controlled by a remote server processing system,
Receive a reset individual identifier request from the user;
Enable identification of the identity of the user;
Responsive to successful identification, transmitting an index corresponding to a selection key from a keymap associated with the user account to the user device or user, the keymap being stored in a memory of the user device and in a server accessible memory;
Receiving a reset code, the user determining the reset code based on the selection keymap and a new personal identifier;
Determine a hash value of the new individual identifier based on the reset code and the selection key;
To store the hash value of the new individual identifier in the user account
A server processing system configured. A method for resetting a user identifier to authenticate a user attempting to access a secure environment controlled by a remote server processing system, the method comprising:
Receiving a reset individual identifier request from the user;
Enabling identification of the identity of the user;
Responsive to successful identification, transmitting an index corresponding to a selection key from a keymap associated with the user account to the user device or user, wherein the keymap is stored in memory and server accessible memory of the user device;
Receiving a reset code, the user determining the reset code based on the selection keymap and a new personal identifier;
Determining a hash value of the new individual identifier based on the reset code and the selection key; And
Storing the hash value of the new individual identifier in the user account
≪ / RTI > A computer-readable medium comprising a server processing system configured to cause a user to reset a user identifier used to authenticate a user attempting to access a secure environment controlled by a remote server processing system, And executable instructions for configuring the server processing system to perform the method of claim 24.

Images